Scopes
Scopes define what an API key or OAuth bearer token can do. Session callers skip scope checks because the dashboard uses route-level organization and product authorization instead. Use the smallest scope set that can complete the workflow.Catalog
This catalog is copied from
apps/client/src/lib/api/scopes.ts. Update both
places whenever scopes are added, renamed, or removed.Minimum scope examples
Denied requests
If a token-style caller lacks a required scope, TPC returns403: